Proxy Policy

  • Thread starter Thread starter henrik
  • Start date Start date
H

henrik

Hello

I have sat in Computer config policy for all the domain that "Proxysettings
per computer"
But where do I set the policy witch proxy server that will be used?

I have tryed set it in User Config "Proxy Settings" but it do not work
unless the user is in that OU.
I have 2 UO's for Computers (depends on witch proxy they will use)
I have one OU for the users ( and the users will log on all the computers,
sometime)

Greatful for help

Henrik
 
Bhargav,

Hope that you do not mind that I jump in here for a quick second!

Henrik,

When you are using GPO in Loopback mode / Replace or Merge you are changing
the normal flow of Group Policies.

Keep in mind that the 'pecking order' for GPOs is local, Site, Domain and
then OU. This means that any local GPOs will be applied first, then any
GPOs linked to the Site, then come any GPOs linked at the domain-level and
finally any GPOs linked to the OU. Please keep in mind that computer-side
GPOs are applied at start up first followed by the user-side GPOs at logon.
The determining factor is the OU ( if any ) in which the computer account
object resides as well as the OU ( if any ) in which the user account object
..


Loopback mode changes this. Let's just look at the OU level and Replace
Mode. When you invoke the Group Policy in Loopback mode / Replace what you
are doing is telling AD to forget about the normal flow of Group Policies
( first any GPOs that are linked to the OU in which that particular computer
account object is located are applied at start up and then any GPOs that are
linked to the OU in which that particular user account object is located are
applied at logon ). What happens in this mode ( replace ) is that the
policies that affect the computer side configuration are applied ( based on
the policies linked to the OU in which the computer account object resides )
while the policies that affect the user side configuration are completely
ignored ( based on the policies linked to the OU in which the user account
object resides ).

Merge Mode is similar to Replace mode. However, the major difference is
that in Merge Mode the policies that affect the user side configuration are
indeed applied!

So, in a nutshell you would need to place all of the computer object
accounts in the proper OU and apply this GPO to that OU.

HTH,

Cary
 
Cary,

Not a problem. This is a community. We all share the knowledge not compete
for it! :)
 
Back
Top